How much liability insurance does a business need?

Most small businesses buy a commercial general liability policy with $1 million per occurrence and a $2 million general aggregate, because leases, customers and public agencies ask for exactly that. Whether it is enough depends on what a bad day at your business looks like: the worst injury you could cause, the contracts you have signed, and the assets a plaintiff could reach. Where the answer is "more than $1 million," the usual fix is an umbrella or excess layer on top, not a bigger primary policy.

Most states do not require a business to carry general liability at all, though some licensing boards do for particular trades (check workers' comp and benefits requirements by state). The number usually comes from contracts, lenders and your own appetite for risk, so the work is deciding which of those is driving you.

What the limits on a general liability policy actually mean

A standard ISO commercial general liability form (CG 00 01) carries several limits on the declarations page, and people routinely confuse them. Carrier and manuscript forms vary, but the ISO structure is the one most contracts are written against.

Two points matter more than the headline number. First, the aggregate is a pool for the whole year. A contractor with three losses in a year can exhaust $2 million even though no single claim reached $1 million. Second, in the standard form defense costs are paid in addition to the limits (the form's supplementary payments provision says they do not reduce the limit), but the duty to defend ends once the applicable limit is paid out in judgments or settlements. Some carrier forms and many professional and management liability policies run the other way, with defense costs eroding the limit; see defense costs inside vs outside policy limits: why it matters.

For the full list of what the policy covers, start with Inside the CGL policy: Coverages A, B and C. This guide stays on the question of size.

Why $1 million and $2 million became the default

Habit, mostly, reinforced by contracts. Public-sector and institutional requirements show the pattern. King County, Washington, for example, asks vendors for $1,000,000 per occurrence and $2,000,000 in the aggregate on a policy at least as broad as ISO CG 00 01, and allows the requirement to be met by combining a primary policy with an umbrella or excess policy. Indiana University's construction requirements pair a $1 million occurrence limit with a $2 million general aggregate and require the per-project aggregate endorsement CG 25 03. Landlords and general contractors tend to copy the same numbers into their own templates.

The default is a floor set by whoever drafted the form, not an analysis of your exposure. A county health department and a sixty-seat restaurant with a liquor license are not the same risk.

What should push your limits higher

Work through these in roughly this order.

1. Contract requirements. This is the hard floor. A commercial lease, a master services agreement, a franchise agreement or a general contractor's subcontract spells out limits, endorsements and sometimes the umbrella amount. Read the insurance section before you sign, and run it through the contract insurance requirements checker. Contract minimums are minimums; they do not cap what you owe if you cause a larger loss. See how to review the insurance requirements in a contract.
2. Severity of the worst realistic injury. A graphic designer's customers rarely visit. A gym, a roofer, a daycare, a restaurant serving alcohol, a trucking operation or a landlord with a parking lot can produce a catastrophic injury claim. Spinal and brain injuries, wrongful death and burns are where seven- and eight-figure demands come from.
3. Venue. Where you operate matters. Marathon Strategies counted 190 verdicts of $10 million or more against corporate defendants in 2025, a 40.7% increase over 2024, totaling more than $25.6 billion, according to Risk & Insurance's report on the study. Georgia, Nevada, Texas, California, Florida and Maryland had the largest dollar totals. The mechanics are in nuclear verdicts and social inflation: why liability costs keep rising. A single big verdict says little about your own odds, but it is why many brokers now push clients toward higher umbrella limits than they bought a decade ago.
4. Assets and ownership. The larger your balance sheet, the more a plaintiff's lawyer has to gain from pursuing you past the policy. A business owner with a paid-off building and savings has more to protect than a startup renting a desk.
5. Products and completed work. If your goods are sold broadly or your work is hidden inside walls and roofs, claims can arrive years later. The products-completed operations aggregate needs to be sized with that tail in mind. See products and completed operations coverage.
6. Other policies underneath. An umbrella sits over general liability, commercial auto and employers liability. The lowest of those limits is the weak point.

Primary limits versus an umbrella

Many small-business programs, including most package policies, top out at $1 million per occurrence on the primary policy. The market's standard answer is to keep $1 million primary and buy an umbrella policy that adds, say, $1 million, $5 million or $10 million of excess limit over the scheduled underlying policies. Carriers set the required underlying limits and may ask for specific classes of business to be excluded or sublimited, so ask for the form and not just the quote.

Umbrella and excess are not the same product. An umbrella can drop down and respond when underlying aggregates are exhausted and may cover some things the primary does not; a pure excess policy follows the underlying form. umbrella vs excess liability explains the difference, and commercial umbrella insurance covers how the coverage works and what drives its price. To rough out a figure, use the How much umbrella coverage do I need?.

If you need more than a single umbrella can supply, brokers build a tower: a lead umbrella, then one or more excess layers above it, each following form. Large towers are for businesses with significant exposure and are priced layer by layer.

A worked example (hypothetical)

Say a 12-employee commercial cleaning company in a mid-sized city has a janitorial contract with a medical office building. The building owner's contract requires $1 million per occurrence and $2 million general aggregate, plus a $5 million umbrella, additional insured status and a waiver of subrogation.

• The company already carries $1 million / $2 million general liability, so the primary limits meet the contract.
• The $5 million umbrella requirement means it has to buy that layer. The umbrella carrier's underlying schedule will also call for auto liability and employers liability at stated limits. The company's auto policy is only $500,000 combined single limit, which would leave a gap under the umbrella, so the broker raises it to $1 million.
• The owner then asks a separate question: what happens if a crew member leaves a floor wet and a visitor suffers a serious fall? The building owner's $5 million is that owner's number, not an assessment of this cleaning company's exposure. After talking it through, the owner buys the $5 million layer because it matches the contract and keeps the cost predictable, and agrees to revisit the amount at renewal.

The figures are invented to show the sequence: contract first, then underlying alignment, then a judgment call about exposure. They are not typical limits or prices.

Checklist for setting limits

• Pull every contract with an insurance clause and list the highest limit each one asks for, by coverage.
• Confirm whether the aggregate must apply per project or per location. The ISO endorsements are CG 25 03 (designated construction project) and CG 25 04 (designated location). Without one, a single big claim at another job can erode the aggregate your client is relying on.
• Match limits across general liability, auto and employers liability so the umbrella has a clean underlying schedule.
• Ask the broker for quotes at two or three umbrella limits so you can see how steeply the price moves between them.
• Check whether defense costs sit inside or outside the limit on each policy.
• Re-check at every renewal and whenever you add a location, a new service line, a larger customer or a vehicle fleet. Limits that fit last year's revenue can be thin now. the annual business insurance review: what to update has a checklist.

What more limit does not fix

Higher limits do nothing about an exclusion. A $10 million umbrella does not cover a claim excluded by the primary policy, such as professional services, pollution or abuse and molestation, unless the policy says it does. For those risks you need dedicated coverage. Limits also do not help if a late notice or a misstated application gives the insurer a coverage defense. Insurance exists to transfer large losses; the conversation about limits is only useful when the policy underneath responds. Details of what each policy excludes are in CGL exclusions: what a general liability policy does not cover, and rules that differ by state, such as which licenses require a minimum limit or how far an indemnity clause can reach, are on the workers' comp and benefits requirements by state tool and the state guides, for example Texas and California.

Policy wording and underwriting rules differ across insurers and states. A licensed broker can check the actual forms against your contracts.

Key takeaways

• A $1 million per occurrence and $2 million general aggregate general liability policy is the common starting point because contracts ask for it, not because it fits every business.
• Your contracts set the hard minimum; severity of exposure, venue and assets decide how far above it to go.
• The usual way to add limit is an umbrella or excess policy over general liability, auto and employers liability, so keep those underlying limits aligned.
• The aggregate is a one-year pool, and per-project or per-location aggregate endorsements protect it from being drained by unrelated losses.
• Higher limits do not repair an exclusion; check what the policy excludes before you decide the amount is enough.